POJIA破甲
地图 / Github app(link) Takeover Listed on "https://docs.doppler.com/docs/github-actions" page

Github app(link) Takeover Listed on "https://docs.doppler.com/docs/github-actions" page

错误配置 / Unlabeled / #2399386

厂商
Doppler
严重程度
低危 · CVSS 3.1
赏金
—
弱点
Unlabeled
研究员
@w3shi
披露日期
2024-03-15
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1240 字符中的一小部分)
Summary: GitHub Apps are a type of integration that allows developers to extend the functionality of GitHub and automate workflows within the GitHub platform. developers can install the github app on need.

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Doppler 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @w3shi · 版权归作者与 Doppler 所有

同类报告

Able to Takeover Merchants Accounts Even They Have Already Setup SSO, After Bypassing the Email ConfirmationShopify · 2020-04-01[www.zomato.com] CORS Misconfiguration, could lead to disclosure of sensitive informationEternal · 2018-11-28 · $550Hackerone supports accounts organitation takeoverHackerOne · 2024-11-19 · $2,500Subdomain takeover of resources.hackerone.comHackerOne · 2020-05-15 · $500CORS misconfiguration allows to steal client's "password", Authorization token and the customer details e.g. names, SSN, bank account etc.LocalTapiola · —Clickjacking in main domain https://topechelon.com/Top Echelon Software · 2025-02-10